Você está na página 1de 3

Basic concept of risk assessment

- Peril
- Hazard
- Risk
- Safety and healh
- Risk asessment a five step process
- Risk assessment sample template
Understanding ERM
- Understanding the role of ERM
- Defining ERM Drivers and characteristics
- Different ERM standards and frameworks ISO 31000, ANZ ERM
- Understanding the COSO ERM framework
- Understanding the ERM framework architecture and its importance
Risk strategy, risk appetite, and risk profile
- Understanding importance of risk in setting strategy, business plans and managing
performance and rewards
- Defining risk appetite and its importance in the risk strategy of the organisation
- Differentiating risk appetite and risk tolerance
- How risk appetite can be articulated for range of risk types
- How risk appetite can be determined in Risk Appetite Statement
- Define risk profile
- Establish corporate risk profile through process risk identification, risk analysis risk
modeling, risk evaluation, risk mitigation
- Methodologies for determining risk profile
Risk governanace, structure, risk policies, risk monitoring and reporting
- Components of Governance,Risk and Compliance
- Evaluating types of governance structure
- Defining role and responsibility of GRC personnel accountability structure, GRC oversight
roles, refining risk management and compliance roles and responsibilities
- Role of risk policies
- Aligning risk policies with business strategies and objectives
- Understanding risk policy components
- Defining risk monitoring and reporting framework
- Understanding and designing Key Risk Indicators (KRIs)
- Implementing different monitoring and reporting tools
Risk culture and risk technology
- Defining risk culture
- Assessing risk culture
- Establishing desired risk culture maturity competence, visibility and type of organisation
- techniques to inculcate risk culture
- Governance Risk Culture technology and importance
- Factors for GRC technology

Introduction

Peril Risk Hazard


Types of risk
ERM Overview
Why Is It Important to Invest in ERM?
Relationship Between Governance, ERM, and Internal Control
Premise, Principles, Limitations, and Effectiveness
Internal Audits Role in ERM
o Assurance Service Roles
o Consulting Services Roles
ERM Frameworks
COSO ERM Framework
o Components
o Objective Categories
ISO 31000
o Mandate and Commitment
o Risk Management Process
ERM Environment
Internal Environment Overview
Factors Affecting the Organization as a Whole
ERM Philosophy
Risk Appetite
o Risk Appetite vs. Risk Tolerance
o Qualitative and Quantitative Terms
o Reputational Risk
Risk Culture
ERM Implementation Risk Assessment
Initiating a Structured, Disciplined Approach to Implementation
Implementation Options and Decisions
Building a Framework
Obtaining ERM Mandate and Commitment
Determining Risk Criteria
Risk Identification and Assessment
Methodology and Techniques Overview
ERM Implementation Risk Treatment
Identifying Risk Treatment/Responses
Evaluation and Selection Considerations
Risk Treatment/Response Options
When Risk Treatment Options Are Most Appropriate
Developing a Risk Treatment/Response Plan
Monitoring the ERM System
ERM Monitoring Defined and Explained
Monitoring the Organizations Context
Monitoring the ERM System
Monitoring the Organizations Business Performance
Monitoring Throughout the Organization
How Monitoring is Performed
Risk Management Reporting
Ongoing Monitoring Activities
Monitoring Evaluations and Deficiencies
Evaluating and Improving ERM

Embedding ERM in the Internal Audit Plan


o Implementing an ERM-based Audit Plan
o Providing Assurance and Consulting Services
o Coordinating Assurance and Consulting Activities
o Documenting Internal Audits Roles and Responsibilities
Embedding ERM in the Internal Audit Methodology
o Planning the Audit
o Conducting the Audit
o Communicating Results
Assessing the ERM System
o A Comprehensive Assessment Approach
o A Maturity Assessment Approach

Você também pode gostar